From e5a07755e7c923d480ed6161e1c908a1b0946978 Mon Sep 17 00:00:00 2001
From: pavel444-byte <pavel.melnikov.kid.1993@gmail.com>
Date: Sun, 1 Nov 2026 15:25:26 +0500
Subject: [PATCH] Expand Telegram signature validation tests

---
 tests/telegram-webapp.test.ts | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/tests/telegram-webapp.test.ts b/tests/telegram-webapp.test.ts
index 44aed1c..977614b 100644
--- a/tests/telegram-webapp.test.ts
+++ b/tests/telegram-webapp.test.ts
@@ -23,5 +23,7 @@ test("Telegram init data verifies identity and rejects tampering, duplicates, an
   assert.equal(verifyTelegramInitData(data, "wrong-token"), null);
   assert.equal(verifyTelegramInitData(data.replace("applicant", "impostor"), token), null);
   assert.equal(verifyTelegramInitData(data + "&user=other", token), null);
+  assert.equal(verifyTelegramInitData(data + "&auth_date=1", token), null);
+  assert.equal(verifyTelegramInitData(data.replace(/hash=[a-f0-9]+/, "hash=not-a-hash"), token), null);
   assert.equal(verifyTelegramInitData(signedData(Math.floor(Date.now() / 1000) - 90000), token), null);
 });